[OpenAFS] Passwordless login through ssh on krb5/afs enabled workstation.

Alexander Al alexander@scred.nl
Thu, 08 Mar 2007 11:46:39 +0100


Simon Wilkinson wrote:
> On 8 Mar 2007, at 10:16, Alexander Al wrote:
> 
>> Is there a possibility that you can use the authorized keys with ssh?
> 
> The problem is that ssh's authorized keys authentication mechanism  
> has no way of getting you a Kerberos ticket, and therefore, no way of  
> getting you an AFS token in order to access your files. You'll need  
> to explicitly kinit and aklog once you've logged in.
> 
> Of course, if you have Kerberos on the machine you're connecting  
> from, you can use Kerberos to give you passwordless login, forwarding  
> your tickets to your workstation, and then have a PAM module get your  
> AFS tokens as part of the login process.

Thanks.

Very Helpfull.

I'll tell the user : "can't" (because he is connecting from outside.)

regards
Alexander.

-- 
Alexander Al
Leiden, Die Niederlande